Row Level Security

[naoki]

I would like to set row level security in the following manner:

The first 

Admin and Editor

• 1 Admin
• Multiple Editor 

The second, viewer access, I have multiple data which I would want to limit who can see which data based on a pre-determine set of rules. I came accross principalusername() however, it do not allow me to set a function called all whereby selected users has the right to see everything and some users to see only certain items, is it possible to set it in this way? The users are being broke down to there position, and department whereby they can only see items for their position and department. 

E.g. A manager can see everything for his/her department. and a staff of the manager can only see his/her own details. The upper management can see everything. 

[v-diye-msft · Accepted solution]

Hi @naoki 

I figure that you’ve defined  the roles in desktop successfully, but not sure where to implement the specific right in service.

Although both classic workspace and new app workspace can implement RLS security. Please make sure the workspace you published the RLS report is Classic workspace. And the users involved are the view-only member.  Coz all the members in new app workspace are editable, that they all can see everything.

please refer to the officical documents here for more details about the roles in workspace: 

https://docs.microsoft.com/en-us/power-bi/service-new-workspaces#roles-in-the-new-workspaces

Best regards,

Dina Ye

[naoki]

@v-diye-msft ok got it that in order for me create what I need, I would need to make use of workspace, however, I am unable to create a new workspace.  This is the error I faced, I am using Power BI Pro, I read that this might be a feature only for Power BI Premium. Is it so? 

 

[v-diye-msft]

Hi @naoki ,

Please check below option is enabled in your admin portal:

Best regards,

Dina Ye